@graphorin/core 0.5.0 → 0.6.0

package/dist/contracts/session-store.d.ts

@@ -6,7 +6,7 @@ import { HandoffRecord } from "../types/handoff.js";
 /**
  * Lightweight session metadata persisted by the sessions package. The
  * actual `session_messages` rows are owned by `MemoryStore` (single source
- * of truth — the sessions package delegates message CRUD to memory).
+ * of truth - the sessions package delegates message CRUD to memory).
  *
  * @stable
  */
@@ -22,7 +22,7 @@ interface SessionMetadata {
 }
 /**
  * Agent registry entry. Captures stable metadata about every agent that
- * ever produced a message — so JSONL exports / replays can resolve a
+ * ever produced a message - so JSONL exports / replays can resolve a
  * `Message.agentId` to a human-readable name even after the agent was
  * renamed or retired.
  *
@@ -55,7 +55,7 @@ interface SessionWorkflowRun {
  * `commentary-sanitized`, …) plus per-session-handoff. Adapters can
  * surface the rows verbatim from disk.
  *
- * The `metadata` field is intentionally an open record — storage
+ * The `metadata` field is intentionally an open record - storage
  * adapters serialize it as JSON. Callers should keep it small and
  * never include secret values.
  *
@@ -120,10 +120,12 @@ interface SessionStoreExt extends SessionStore {
   /** Delete audit rows older than the supplied epoch ms. */
   pruneAuditEntries(beforeEpochMs: number): Promise<number>;
   /**
-   * Hard-delete a session and cascade its session-owned rows — handoffs,
-   * workflow-run attachments, and audit entries (RP-6). Message rows live in
-   * the `SessionMemoryStore` and are purged separately. A no-op for an unknown
-   * id.
+   * Hard-delete a session and cascade its session-owned rows - handoffs,
+   * workflow-run attachments, and audit entries (RP-6) - **plus the
+   * session's content**: its `session_messages` rows (with their FTS and
+   * vector index entries) and any episodes scoped to the session
+   * (store-01). After this call the conversation is no longer retrievable
+   * through `memory.session.*` search surfaces. A no-op for an unknown id.
    */
   deleteSession(sessionId: string): Promise<void>;
   /**

package/dist/contracts/session-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session-store.d.ts","names":[],"sources":["../../src/contracts/session-store.ts"],"sourcesContent":[],"mappings":";;;;;;;AAUA;AAmBA;AAcA;AAqBA;AAmBA;AAC0B,UA1ET,eAAA,CA0ES;EAAkB,SAAA,EAAA,EAAA,MAAA;EACH,SAAA,MAAA,EAAA,MAAA;EAAR,SAAA,OAAA,EAAA,MAAA;EAEjB,SAAA,KAAA,CAAA,EAAA,MAAA;EAAL,SAAA,SAAA,EAAA,MAAA;EACgB,SAAA,SAAA,CAAA,EAAA,MAAA;EAAd,SAAA,QAAA,CAAA,EAAA,MAAA;EAAR,SAAA,IAAA,CAAA,EAtEa,aAsEb,CAAA,MAAA,CAAA;;;;;;;;;;AAQsC,UAnE1B,kBAAA,CAmE0B;EAAgB,SAAA,EAAA,EAAA,MAAA;EACF,SAAA,WAAA,EAAA,MAAA;EAAd,SAAA,YAAA,EAAA,MAAA;EAAR,SAAA,SAAA,CAAA,EAAA,MAAA;EAEV,SAAA,IAAA,CAAA,EAjEP,aAiEO,CAAA,MAAA,CAAA;;;;;;AAezB;;AAIsC,UA3ErB,kBAAA,CA2EqB;EAAd,SAAA,SAAA,EAAA,MAAA;EAAR,SAAA,UAAA,EAAA,MAAA;EAMJ,SAAA,QAAA,EAAA,MAAA;EACP,SAAA,UAAA,EAAA,MAAA;EAEqB,SAAA,MAAA,EAAA,SAAA,GAAA,WAAA,GAAA,WAAA,GAAA,QAAA;;;;;;;;;;;;;;;UA/DT,iBAAA;;;;;;;;;;sBAUK,SAAS;;;;;;;;UASd,YAAA;0BACS,kBAAkB;iCACX,QAAQ;sBAE9B,KAAK,sCACX,QAAQ,cAAc;0CACe,QAAQ,mBAAmB;qDAChB;uBAE9B,qBAAqB;mDACO;iCAClB,QAAQ;2CAEE,gBAAgB;mCACxB,QAAQ,cAAc;yBAEhC,qBAAqB;uCACP,QAAQ,cAAc;;;;;;;;;;;;;UAc5C,eAAA,SAAwB;;gCAET;;gBAEhB,QAAQ,cAAc;;2FAM1B,+BACP;;0BAEqB,oBAAoB;;;;MAKzC,QAAQ,cAAc;;4CAEiB;;;;;;;oCAOR;;;;;;;;;;MAU9B"}
+{"version":3,"file":"session-store.d.ts","names":[],"sources":["../../src/contracts/session-store.ts"],"sourcesContent":[],"mappings":";;;;;;;AAUA;AAmBA;AAcA;AAqBA;AAmBA;AAC0B,UA1ET,eAAA,CA0ES;EAAkB,SAAA,EAAA,EAAA,MAAA;EACH,SAAA,MAAA,EAAA,MAAA;EAAR,SAAA,OAAA,EAAA,MAAA;EAEjB,SAAA,KAAA,CAAA,EAAA,MAAA;EAAL,SAAA,SAAA,EAAA,MAAA;EACgB,SAAA,SAAA,CAAA,EAAA,MAAA;EAAd,SAAA,QAAA,CAAA,EAAA,MAAA;EAAR,SAAA,IAAA,CAAA,EAtEa,aAsEb,CAAA,MAAA,CAAA;;;;;;;;;;AAQsC,UAnE1B,kBAAA,CAmE0B;EAAgB,SAAA,EAAA,EAAA,MAAA;EACF,SAAA,WAAA,EAAA,MAAA;EAAd,SAAA,YAAA,EAAA,MAAA;EAAR,SAAA,SAAA,CAAA,EAAA,MAAA;EAEV,SAAA,IAAA,CAAA,EAjEP,aAiEO,CAAA,MAAA,CAAA;;;;;;AAezB;;AAIsC,UA3ErB,kBAAA,CA2EqB;EAAd,SAAA,SAAA,EAAA,MAAA;EAAR,SAAA,UAAA,EAAA,MAAA;EAMJ,SAAA,QAAA,EAAA,MAAA;EACP,SAAA,UAAA,EAAA,MAAA;EAEqB,SAAA,MAAA,EAAA,SAAA,GAAA,WAAA,GAAA,WAAA,GAAA,QAAA;;;;;;;;;;;;;;;UA/DT,iBAAA;;;;;;;;;;sBAUK,SAAS;;;;;;;;UASd,YAAA;0BACS,kBAAkB;iCACX,QAAQ;sBAE9B,KAAK,sCACX,QAAQ,cAAc;0CACe,QAAQ,mBAAmB;qDAChB;uBAE9B,qBAAqB;mDACO;iCAClB,QAAQ;2CAEE,gBAAgB;mCACxB,QAAQ,cAAc;yBAEhC,qBAAqB;uCACP,QAAQ,cAAc;;;;;;;;;;;;;UAc5C,eAAA,SAAwB;;gCAET;;gBAEhB,QAAQ,cAAc;;2FAM1B,+BACP;;0BAEqB,oBAAoB;;;;MAKzC,QAAQ,cAAc;;4CAEiB;;;;;;;;;oCASR;;;;;;;;;;MAU9B"}

package/dist/contracts/tool.d.ts

@@ -2,8 +2,8 @@ import { Logger } from "./logger.js";
 import { Sensitivity } from "../types/sensitivity.js";
 import { MessageContent } from "../types/message.js";
 import { ModelHint, ModelSpec } from "./preferred-model.js";
-import { SecretValue } from "./secret-value.js";
 import { Tracer } from "./tracer.js";
+import { SecretValue } from "./secret-value.js";
 import { ContentChunk, InboundSanitizationPolicy, MemoryGuardTier, SandboxPolicy, SideEffectClass, ToolSource, ToolTrustClass, TruncationStrategy } from "../types/tool.js";
 import { RunContext } from "../types/run.js";
 import { ZodLikeSchema } from "../utils/validation.js";
@@ -18,7 +18,7 @@ import { ZodLikeSchema } from "../utils/validation.js";
  * server, sessions, observability, …) carries `Tool[]` references on
  * its public surface.
  *
- * The interface is intentionally minimal — extension fields covered by
+ * The interface is intentionally minimal - extension fields covered by
  * later phases (per-tool `secretsAllowed` ACL, inbound sanitization
  * policy, result truncation strategy, streaming hint, …) are added
  * **additively** by their owning packages so that v0.1 consumers can
@@ -110,7 +110,7 @@ interface Tool<TInput = unknown, TOutput = unknown, TDeps = unknown> {
   readonly truncationStrategy?: TruncationStrategy;
   /**
    * Worked examples shown to the model alongside the tool's
-   * description. Bounded `[1, 5]` — overflow emits a one-time WARN at
+   * description. Bounded `[1, 5]` - overflow emits a one-time WARN at
    * registration. Each example's `input` and `output` is validated
    * against the tool's `inputSchema` / `outputSchema`.
    */
@@ -133,12 +133,12 @@ interface Tool<TInput = unknown, TOutput = unknown, TDeps = unknown> {
    * Optional callback returning a deterministic dedup key per
    * `(input, ctx)` tuple. REQUIRED-by-WARN for `'side-effecting'` /
    * `'external-stateful'` tools. The framework does not validate
-   * determinism — that is the operator's contract.
+   * determinism - that is the operator's contract.
    */
   readonly idempotencyKey?: (input: TInput, ctx: ToolExecutionContext<TDeps>) => string | Promise<string>;
   /**
    * Opt-in flag for streaming-tool execution. The `?: true` typing
-   * rejects `streamingHint: false` on purpose — absence is the
+   * rejects `streamingHint: false` on purpose - absence is the
    * canonical "non-streaming" signal preserving v0.1 behaviour. When
    * `true`, `Tool.execute(...)` may call `ctx.streamContent(...)` /
    * `ctx.reportProgress(...)` and may return `Promise<void>`.
@@ -199,6 +199,19 @@ interface ResolvedTool<TInput = unknown, TOutput = unknown, TDeps = unknown> ext
 interface ToolReturn<TOutput = unknown> {
   readonly output: TOutput;
   readonly contentParts?: ReadonlyArray<MessageContent>;
+  /**
+   * C6: per-result taint override the data-flow ledger honours when
+   * recording this output. Lets a FIRST-PARTY tool whose CONTENT is not
+   * first-party (e.g. memory recall returning quarantined /
+   * foreign-provenance facts) re-arm the taint ledger, closing the
+   * cross-session poisoning leg. Flags only ever WIDEN the derived label
+   * (they cannot launder an untrusted tool's output into trusted).
+   */
+  readonly taint?: {
+    readonly untrusted?: boolean;
+    readonly sensitive?: boolean;
+    readonly sourceKind?: string;
+  };
 }
 /**
  * Per-call execution context handed to `Tool.execute(...)`. Carries the
@@ -217,7 +230,7 @@ interface ToolExecutionContext<TDeps = unknown> {
   readonly logger: Logger;
   /**
    * Per-call secrets accessor. The accessor enforces the tool's
-   * `secretsAllowed` ACL — calling `require(...)` for a key that is
+   * `secretsAllowed` ACL - calling `require(...)` for a key that is
    * not on the allowlist throws `SecretAccessDeniedError`.
    */
   readonly secrets: ToolSecretsAccessor;
@@ -239,7 +252,7 @@ interface ToolExecutionContext<TDeps = unknown> {
  * Per-call secrets accessor surface. Implemented by the executor; the
  * tool author calls `require(...)` to obtain a `SecretValue` wrapper.
  *
- * The accessor is intentionally narrow — the ACL enforcement happens
+ * The accessor is intentionally narrow - the ACL enforcement happens
  * inside `require(...)`, so the tool author never accidentally
  * unwraps a secret outside the tool's permitted set.
  *

package/dist/contracts/tool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tool.d.ts","names":[],"sources":["../../src/contracts/tool.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;AAkCA;;;;;;;;;;;;;AAmD6B,UAnDZ,IAmDY,CAAA,SAAA,OAAA,EAAA,UAAA,OAAA,EAAA,QAAA,OAAA,CAAA,CAAA;EAEI,SAAA,IAAA,EAAA,MAAA;EA6BD,SAAA,WAAA,EAAA,MAAA;EAOgB,SAAA,WAAA,EAtFxB,aAsFwB,CAtFV,MAsFU,CAAA;EAAQ,SAAA,YAAA,CAAA,EArF9B,aAqF8B,CArFhB,OAqFgB,CAAA;EAApB;;;;;EAuB3B,SAAA,aAAA,CAAA,EAAA,OAAA,GAAA,CAAA,CAAA,KAAA,EApGM,MAoGN,EAAA,GAAA,EApGmB,oBAoGnB,CApGwC,KAoGxC,CAAA,EAAA,GAAA,OAAA,GApG6D,OAoG7D,CAAA,OAAA,CAAA,CAAA;EACO;;;;;;;;EAyBO,SAAA,aAAA,CAAA,EArHI,aAqHJ;EAAlB;EAAO,SAAA,IAAA,CAAA,EAnHM,aAmHN,CAAA,MAAA,CAAA;EAUK;;;;;;AAcjB;EACe,SAAA,aAAA,CAAA,EAAA,UAAA,GAAA,YAAA;EAAQ;;;;;EAQO,SAAA,cAAA,CAAA,EAtIF,aAsIE,CAAA,MAAA,CAAA;EAAY;;;AAU1C;;EAEwC,SAAA,WAAA,CAAA,EAlJC,WAkJD;EAAd;;AAY1B;;;;;EAKmB,SAAA,eAAA,CAAA,EArJU,eAqJV;EAMC;EAaG,SAAA,mBAAA,CAAA,EAtKU,yBAsKV;EAAY;AAanC;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAtJgC;;;;;;;sBAOV,cAAc,YAAY,QAAQ;;;;;;;;;;;;;;6BAc3B;;;;;;;oCAQlB,aACF,qBAAqB,oBACd;;;;;;;;;;;;;;4BAcY,YAAY;;;;;;;;iBAS7B,aACF,qBAAqB,SACzB,QAAQ,UAAU,WAAW;;;;;;;;;UAUjB;kBACC;mBACC,UAAU,WAAW;;;;;;;;;;;UAYvB,2EACP,KAAK,QAAQ,SAAS;yBACP;qBACJ;;8BAES;;;;8BAIA,YAAY;;;;;;;;;UAUzB;mBACE;0BACO,cAAc;;;;;;;;;;;UAYvB;;uBAEM,WAAW;mBACf;mBACA;mBACA;;;;;;oBAMC;;;;;;;;;;;;;uBAaG;;;;;;;;;;;;UAaN,mBAAA;;;;;;;;;MAUZ,QAV+B,WAAA;;;MAc/B,QAJO,WAAA"}
+{"version":3,"file":"tool.d.ts","names":[],"sources":["../../src/contracts/tool.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;AAkCA;;;;;;;;;;;;;AAmD6B,UAnDZ,IAmDY,CAAA,SAAA,OAAA,EAAA,UAAA,OAAA,EAAA,QAAA,OAAA,CAAA,CAAA;EAEI,SAAA,IAAA,EAAA,MAAA;EA6BD,SAAA,WAAA,EAAA,MAAA;EAOgB,SAAA,WAAA,EAtFxB,aAsFwB,CAtFV,MAsFU,CAAA;EAAQ,SAAA,YAAA,CAAA,EArF9B,aAqF8B,CArFhB,OAqFgB,CAAA;EAApB;;;;;EAuB3B,SAAA,aAAA,CAAA,EAAA,OAAA,GAAA,CAAA,CAAA,KAAA,EApGM,MAoGN,EAAA,GAAA,EApGmB,oBAoGnB,CApGwC,KAoGxC,CAAA,EAAA,GAAA,OAAA,GApG6D,OAoG7D,CAAA,OAAA,CAAA,CAAA;EACO;;;;;;;;EAyBO,SAAA,aAAA,CAAA,EArHI,aAqHJ;EAAlB;EAAO,SAAA,IAAA,CAAA,EAnHM,aAmHN,CAAA,MAAA,CAAA;EAUK;;;;;;AAcjB;EACe,SAAA,aAAA,CAAA,EAAA,UAAA,GAAA,YAAA;EAAQ;;;;;EAQO,SAAA,cAAA,CAAA,EAtIF,aAsIE,CAAA,MAAA,CAAA;EAAY;;;AAU1C;;EAEwC,SAAA,WAAA,CAAA,EAlJC,WAkJD;EAAd;;AAyB1B;;;;;EAKmB,SAAA,eAAA,CAAA,EAlKU,eAkKV;EAMC;EAaG,SAAA,mBAAA,CAAA,EAnLU,yBAmLV;EAAY;AAanC;;;;;;;;;;;;;;;;;;;;;;;;;;;gCAnKgC;;;;;;;sBAOV,cAAc,YAAY,QAAQ;;;;;;;;;;;;;;6BAc3B;;;;;;;oCAQlB,aACF,qBAAqB,oBACd;;;;;;;;;;;;;;4BAcY,YAAY;;;;;;;;iBAS7B,aACF,qBAAqB,SACzB,QAAQ,UAAU,WAAW;;;;;;;;;UAUjB;kBACC;mBACC,UAAU,WAAW;;;;;;;;;;;UAYvB,2EACP,KAAK,QAAQ,SAAS;yBACP;qBACJ;;8BAES;;;;8BAIA,YAAY;;;;;;;;;UAUzB;mBACE;0BACO,cAAc;;;;;;;;;;;;;;;;;;;;;;;;UAyBvB;;uBAEM,WAAW;mBACf;mBACA;mBACA;;;;;;oBAMC;;;;;;;;;;;;;uBAaG;;;;;;;;;;;;UAaN,mBAAA;;;;;;;;;MAUZ,QAV+B,WAAA;;;MAc/B,QAJO,WAAA"}

package/dist/contracts/tracer.d.ts

@@ -7,7 +7,7 @@
  *
  * @stable
  */
-type SpanType = 'agent.run' | 'agent.step' | 'agent.handoff' | 'agent.suspend' | 'agent.resume' | 'provider.generate' | 'provider.stream' | 'tool.execute' | 'tool.approval' | 'memory.read.working' | 'memory.read.session' | 'memory.read.episodic' | 'memory.read.semantic' | 'memory.read.procedural' | 'memory.read.shared' | 'memory.write.working' | 'memory.write.session' | 'memory.write.episodic' | 'memory.write.semantic' | 'memory.write.procedural' | 'memory.write.shared' | 'memory.search.working' | 'memory.search.session' | 'memory.search.episodic' | 'memory.search.semantic' | 'memory.search.procedural' | 'memory.search.shared' | 'memory.consolidate.light' | 'memory.consolidate.standard' | 'memory.consolidate.deep' | 'memory.consolidate.reflect' | 'memory.search.insight' | 'memory.read.insight' | 'memory.write.insight' | 'memory.conflict' | 'memory.embed' | 'workflow.run' | 'workflow.step' | 'workflow.task' | 'workflow.checkpoint' | 'skill.activate' | 'skill.load' | 'mcp.connect' | 'mcp.call' | 'mcp.list-tools';
+type SpanType = 'agent.run' | 'agent.step' | 'agent.handoff' | 'agent.suspend' | 'agent.resume' | 'provider.generate' | 'provider.stream' | 'tool.execute' | 'tool.approval' | 'memory.read.working' | 'memory.read.session' | 'memory.read.episodic' | 'memory.read.semantic' | 'memory.read.procedural' | 'memory.read.shared' | 'memory.write.working' | 'memory.write.session' | 'memory.write.episodic' | 'memory.write.semantic' | 'memory.write.procedural' | 'memory.write.shared' | 'memory.search.working' | 'memory.search.session' | 'memory.search.episodic' | 'memory.search.semantic' | 'memory.search.procedural' | 'memory.search.shared' | 'memory.consolidate.light' | 'memory.consolidate.standard' | 'memory.consolidate.deep' | 'memory.consolidate.reflect' | 'memory.consolidate.learned-context' | 'memory.search.insight' | 'memory.read.insight' | 'memory.write.insight' | 'memory.conflict' | 'memory.embed' | 'workflow.run' | 'workflow.step' | 'workflow.task' | 'workflow.checkpoint' | 'skill.activate' | 'skill.load' | 'mcp.connect' | 'mcp.call' | 'mcp.list-tools';
 /**
  * Status of a finished span. Mirrors the OTel status convention with
  * `'ok' | 'error'` short forms instead of the verbose tristate.

package/dist/contracts/tracer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tracer.d.ts","names":[],"sources":["../../src/contracts/tracer.ts"],"sourcesContent":[],"mappings":";;AAQA;AAqDA;AAOA;;;;;AAGY,KA/DA,QAAA,GA+DA,WAAkB,GAAA,YAAA,GAAA,eAAA,GAAA,eAAA,GAAA,cAAA,GAAA,mBAAA,GAAA,iBAAA,GAAA,cAAA,GAAA,eAAA,GAAA,qBAAA,GAAA,qBAAA,GAAA,sBAAA,GAAA,sBAAA,GAAA,wBAAA,GAAA,oBAAA,GAAA,sBAAA,GAAA,sBAAA,GAAA,uBAAA,GAAA,uBAAA,GAAA,yBAAA,GAAA,qBAAA,GAAA,uBAAA,GAAA,uBAAA,GAAA,wBAAA,GAAA,wBAAA,GAAA,0BAAA,GAAA,sBAAA,GAAA,0BAAA,GAAA,6BAAA,GAAA,yBAAA,GAAA,4BAAA,GAAA,uBAAA,GAAA,qBAAA,GAAA,sBAAA,GAAA,iBAAA,GAAA,cAAA,GAAA,cAAA,GAAA,eAAA,GAAA,eAAA,GAAA,qBAAA,GAAA,gBAAA,GAAA,YAAA,GAAA,aAAA,GAAA,UAAA,GAAA,gBAAA;;;;;AAe9B;;AAA6C,KAzBjC,UAAA,GAyBiC,IAAA,GAAA,OAAA,GAAA,WAAA;;;;;;AAsB5B,KAxCL,cAAA,GAAiB,QAwCI,CAxCK,MAwCL,CAAA,MAAA,EAxCoB,kBAwCpB,CAAA,CAAA;;AAAsB,KArC3C,kBAAA,GAqC2C,MAAA,GAAA,MAAA,GAAA,OAAA,GAAA,IAAA,GAhCnD,aAgCmD,CAAA,MAAA,CAAA,GA/BnD,aA+BmD,CAAA,MAAA,CAAA,GA9BnD,aA8BmD,CAAA,OAAA,CAAA;;;;;AAavD;;AACuD,UApCtC,MAoCsC,CAAA,UApCrB,QAoCqB,GApCV,QAoCU,CAAA,CAAA;EAAjB,SAAA,IAAA,EAnCrB,CAmCqB;EAA6B,SAAA,EAAA,EAAA,MAAA;EAAP,SAAA,OAAA,EAAA,MAAA;EAK3C,SAAA,QAAA,CAAA,EAAA,MAAA;EACU;EAAjB,aAAA,CAAA,KAAA,EApCa,cAoCb,CAAA,EAAA,IAAA;EACY;EAAP,QAAA,CAAA,IAAA,EAAA,MAAA,EAAA,KAAA,CAAA,EAnCkB,cAmClB,CAAA,EAAA,IAAA;EAAc;EAAY,eAAA,CAAA,GAAA,EAAA,OAAA,CAAA,EAAA,IAAA;EAAR;EACpB,SAAA,CAAA,MAAA,EAhCO,UAgCP,EAAA,OAAA,CAAA,EAAA,MAAA,CAAA,EAAA,IAAA;EAAR;EAES,GAAA,EAAA,EAAA,IAAA;;AASd;;;;;UAjCiB,2BAA2B,WAAW;iBACtC;mBACE;oBACC;;;;;;;;;UAUH,MAAA;sBACK,gBAAgB,iBAAiB,KAAK,OAAO;;;;;iBAKlD,mBACP,iBAAiB,eACZ,OAAO,OAAO,IAAI,QAAQ,KACpC,QAAQ;;cAEC;;;;;;;;cASD,aAAa"}
+{"version":3,"file":"tracer.d.ts","names":[],"sources":["../../src/contracts/tracer.ts"],"sourcesContent":[],"mappings":";;AAQA;AAsDA;AAOA;;;;;AAGY,KAhEA,QAAA,GAgEA,WAAkB,GAAA,YAAA,GAAA,eAAA,GAAA,eAAA,GAAA,cAAA,GAAA,mBAAA,GAAA,iBAAA,GAAA,cAAA,GAAA,eAAA,GAAA,qBAAA,GAAA,qBAAA,GAAA,sBAAA,GAAA,sBAAA,GAAA,wBAAA,GAAA,oBAAA,GAAA,sBAAA,GAAA,sBAAA,GAAA,uBAAA,GAAA,uBAAA,GAAA,yBAAA,GAAA,qBAAA,GAAA,uBAAA,GAAA,uBAAA,GAAA,wBAAA,GAAA,wBAAA,GAAA,0BAAA,GAAA,sBAAA,GAAA,0BAAA,GAAA,6BAAA,GAAA,yBAAA,GAAA,4BAAA,GAAA,oCAAA,GAAA,uBAAA,GAAA,qBAAA,GAAA,sBAAA,GAAA,iBAAA,GAAA,cAAA,GAAA,cAAA,GAAA,eAAA,GAAA,eAAA,GAAA,qBAAA,GAAA,gBAAA,GAAA,YAAA,GAAA,aAAA,GAAA,UAAA,GAAA,gBAAA;;;;;AAe9B;;AAA6C,KAzBjC,UAAA,GAyBiC,IAAA,GAAA,OAAA,GAAA,WAAA;;;;;;AAsB5B,KAxCL,cAAA,GAAiB,QAwCI,CAxCK,MAwCL,CAAA,MAAA,EAxCoB,kBAwCpB,CAAA,CAAA;;AAAsB,KArC3C,kBAAA,GAqC2C,MAAA,GAAA,MAAA,GAAA,OAAA,GAAA,IAAA,GAhCnD,aAgCmD,CAAA,MAAA,CAAA,GA/BnD,aA+BmD,CAAA,MAAA,CAAA,GA9BnD,aA8BmD,CAAA,OAAA,CAAA;;;;;AAavD;;AACuD,UApCtC,MAoCsC,CAAA,UApCrB,QAoCqB,GApCV,QAoCU,CAAA,CAAA;EAAjB,SAAA,IAAA,EAnCrB,CAmCqB;EAA6B,SAAA,EAAA,EAAA,MAAA;EAAP,SAAA,OAAA,EAAA,MAAA;EAK3C,SAAA,QAAA,CAAA,EAAA,MAAA;EACU;EAAjB,aAAA,CAAA,KAAA,EApCa,cAoCb,CAAA,EAAA,IAAA;EACY;EAAP,QAAA,CAAA,IAAA,EAAA,MAAA,EAAA,KAAA,CAAA,EAnCkB,cAmClB,CAAA,EAAA,IAAA;EAAc;EAAY,eAAA,CAAA,GAAA,EAAA,OAAA,CAAA,EAAA,IAAA;EAAR;EACpB,SAAA,CAAA,MAAA,EAhCO,UAgCP,EAAA,OAAA,CAAA,EAAA,MAAA,CAAA,EAAA,IAAA;EAAR;EAES,GAAA,EAAA,EAAA,IAAA;;AASd;;;;;UAjCiB,2BAA2B,WAAW;iBACtC;mBACE;oBACC;;;;;;;;;UAUH,MAAA;sBACK,gBAAgB,iBAAiB,KAAK,OAAO;;;;;iBAKlD,mBACP,iBAAiB,eACZ,OAAO,OAAO,IAAI,QAAQ,KACpC,QAAQ;;cAEC;;;;;;;;cASD,aAAa"}

package/dist/contracts/tracer.js.map

@@ -1 +1 @@
-{"version":3,"file":"tracer.js","names":["NOOP_TRACER: Tracer"],"sources":["../../src/contracts/tracer.ts"],"sourcesContent":["/**\n * Discriminator union for typed observability spans.\n *\n * The list mirrors the span taxonomy documented for the observability\n * layer; concrete implementations live in `@graphorin/observability`.\n *\n * @stable\n */\nexport type SpanType =\n  | 'agent.run'\n  | 'agent.step'\n  | 'agent.handoff'\n  | 'agent.suspend'\n  | 'agent.resume'\n  | 'provider.generate'\n  | 'provider.stream'\n  | 'tool.execute'\n  | 'tool.approval'\n  | 'memory.read.working'\n  | 'memory.read.session'\n  | 'memory.read.episodic'\n  | 'memory.read.semantic'\n  | 'memory.read.procedural'\n  | 'memory.read.shared'\n  | 'memory.write.working'\n  | 'memory.write.session'\n  | 'memory.write.episodic'\n  | 'memory.write.semantic'\n  | 'memory.write.procedural'\n  | 'memory.write.shared'\n  | 'memory.search.working'\n  | 'memory.search.session'\n  | 'memory.search.episodic'\n  | 'memory.search.semantic'\n  | 'memory.search.procedural'\n  | 'memory.search.shared'\n  | 'memory.consolidate.light'\n  | 'memory.consolidate.standard'\n  | 'memory.consolidate.deep'\n  | 'memory.consolidate.reflect'\n  | 'memory.search.insight'\n  | 'memory.read.insight'\n  | 'memory.write.insight'\n  | 'memory.conflict'\n  | 'memory.embed'\n  | 'workflow.run'\n  | 'workflow.step'\n  | 'workflow.task'\n  | 'workflow.checkpoint'\n  | 'skill.activate'\n  | 'skill.load'\n  | 'mcp.connect'\n  | 'mcp.call'\n  | 'mcp.list-tools';\n\n/**\n * Status of a finished span. Mirrors the OTel status convention with\n * `'ok' | 'error'` short forms instead of the verbose tristate.\n *\n * @stable\n */\nexport type SpanStatus = 'ok' | 'error' | 'cancelled';\n\n/**\n * Free-form attributes attached to a span.\n *\n * @stable\n */\nexport type SpanAttributes = Readonly<Record<string, SpanAttributeValue>>;\n\n/** @stable */\nexport type SpanAttributeValue =\n  | string\n  | number\n  | boolean\n  | null\n  | ReadonlyArray<string>\n  | ReadonlyArray<number>\n  | ReadonlyArray<boolean>;\n\n/**\n * Typed span. Generic over `SpanType` so consumers can specialize a\n * function on a particular span kind without losing the discriminator.\n *\n * @stable\n */\nexport interface AISpan<T extends SpanType = SpanType> {\n  readonly type: T;\n  readonly id: string;\n  readonly traceId: string;\n  readonly parentId?: string;\n  /** Add or replace attributes. Repeated calls are merged (last write wins). */\n  setAttributes(attrs: SpanAttributes): void;\n  /** Append a span event (attribute-bearing time-stamped marker). */\n  addEvent(name: string, attrs?: SpanAttributes): void;\n  /** Record an exception. Multiple calls are kept in the span event log. */\n  recordException(err: unknown): void;\n  /** Set the terminal status. */\n  setStatus(status: SpanStatus, message?: string): void;\n  /** End the span. Idempotent. */\n  end(): void;\n}\n\n/**\n * Span constructor parameters.\n *\n * @stable\n */\nexport interface StartSpanOptions<T extends SpanType = SpanType> {\n  readonly type: T;\n  readonly attrs?: SpanAttributes;\n  readonly parent?: AISpan;\n}\n\n/**\n * Pluggable tracer. Implementations live in `@graphorin/observability`.\n * The interface intentionally mirrors a subset of the OTel API so that\n * adapter code is a thin pass-through.\n *\n * @stable\n */\nexport interface Tracer {\n  startSpan<T extends SpanType>(opts: StartSpanOptions<T>): AISpan<T>;\n  /**\n   * Convenience wrapper: start a span, run `fn` inside, and call\n   * `setStatus('ok' | 'error')` + `end()` based on the outcome.\n   */\n  span<T extends SpanType, R>(\n    opts: StartSpanOptions<T>,\n    fn: (span: AISpan<T>) => R | Promise<R>,\n  ): Promise<R>;\n  /** Force-flush any pending spans. */\n  shutdown(): Promise<void>;\n}\n\n/**\n * Minimal no-op tracer. Useful as a typed default when downstream code\n * needs a non-null `Tracer` without taking the observability dependency.\n *\n * @stable\n */\nexport const NOOP_TRACER: Tracer = {\n  startSpan<T extends SpanType>(opts: StartSpanOptions<T>): AISpan<T> {\n    const span: AISpan<T> = {\n      type: opts.type,\n      id: '',\n      traceId: '',\n      setAttributes(): void {},\n      addEvent(): void {},\n      recordException(): void {},\n      setStatus(): void {},\n      end(): void {},\n    };\n    return span;\n  },\n  async span<T extends SpanType, R>(\n    opts: StartSpanOptions<T>,\n    fn: (span: AISpan<T>) => R | Promise<R>,\n  ): Promise<R> {\n    const span = this.startSpan(opts);\n    try {\n      return await fn(span);\n    } finally {\n      span.end();\n    }\n  },\n  async shutdown(): Promise<void> {},\n};\n"],"mappings":";;;;;;;AA6IA,MAAaA,cAAsB;CACjC,UAA8B,MAAsC;AAWlE,SAVwB;GACtB,MAAM,KAAK;GACX,IAAI;GACJ,SAAS;GACT,gBAAsB;GACtB,WAAiB;GACjB,kBAAwB;GACxB,YAAkB;GAClB,MAAY;GACb;;CAGH,MAAM,KACJ,MACA,IACY;EACZ,MAAM,OAAO,KAAK,UAAU,KAAK;AACjC,MAAI;AACF,UAAO,MAAM,GAAG,KAAK;YACb;AACR,QAAK,KAAK;;;CAGd,MAAM,WAA0B;CACjC"}
+{"version":3,"file":"tracer.js","names":["NOOP_TRACER: Tracer"],"sources":["../../src/contracts/tracer.ts"],"sourcesContent":["/**\n * Discriminator union for typed observability spans.\n *\n * The list mirrors the span taxonomy documented for the observability\n * layer; concrete implementations live in `@graphorin/observability`.\n *\n * @stable\n */\nexport type SpanType =\n  | 'agent.run'\n  | 'agent.step'\n  | 'agent.handoff'\n  | 'agent.suspend'\n  | 'agent.resume'\n  | 'provider.generate'\n  | 'provider.stream'\n  | 'tool.execute'\n  | 'tool.approval'\n  | 'memory.read.working'\n  | 'memory.read.session'\n  | 'memory.read.episodic'\n  | 'memory.read.semantic'\n  | 'memory.read.procedural'\n  | 'memory.read.shared'\n  | 'memory.write.working'\n  | 'memory.write.session'\n  | 'memory.write.episodic'\n  | 'memory.write.semantic'\n  | 'memory.write.procedural'\n  | 'memory.write.shared'\n  | 'memory.search.working'\n  | 'memory.search.session'\n  | 'memory.search.episodic'\n  | 'memory.search.semantic'\n  | 'memory.search.procedural'\n  | 'memory.search.shared'\n  | 'memory.consolidate.light'\n  | 'memory.consolidate.standard'\n  | 'memory.consolidate.deep'\n  | 'memory.consolidate.reflect'\n  | 'memory.consolidate.learned-context'\n  | 'memory.search.insight'\n  | 'memory.read.insight'\n  | 'memory.write.insight'\n  | 'memory.conflict'\n  | 'memory.embed'\n  | 'workflow.run'\n  | 'workflow.step'\n  | 'workflow.task'\n  | 'workflow.checkpoint'\n  | 'skill.activate'\n  | 'skill.load'\n  | 'mcp.connect'\n  | 'mcp.call'\n  | 'mcp.list-tools';\n\n/**\n * Status of a finished span. Mirrors the OTel status convention with\n * `'ok' | 'error'` short forms instead of the verbose tristate.\n *\n * @stable\n */\nexport type SpanStatus = 'ok' | 'error' | 'cancelled';\n\n/**\n * Free-form attributes attached to a span.\n *\n * @stable\n */\nexport type SpanAttributes = Readonly<Record<string, SpanAttributeValue>>;\n\n/** @stable */\nexport type SpanAttributeValue =\n  | string\n  | number\n  | boolean\n  | null\n  | ReadonlyArray<string>\n  | ReadonlyArray<number>\n  | ReadonlyArray<boolean>;\n\n/**\n * Typed span. Generic over `SpanType` so consumers can specialize a\n * function on a particular span kind without losing the discriminator.\n *\n * @stable\n */\nexport interface AISpan<T extends SpanType = SpanType> {\n  readonly type: T;\n  readonly id: string;\n  readonly traceId: string;\n  readonly parentId?: string;\n  /** Add or replace attributes. Repeated calls are merged (last write wins). */\n  setAttributes(attrs: SpanAttributes): void;\n  /** Append a span event (attribute-bearing time-stamped marker). */\n  addEvent(name: string, attrs?: SpanAttributes): void;\n  /** Record an exception. Multiple calls are kept in the span event log. */\n  recordException(err: unknown): void;\n  /** Set the terminal status. */\n  setStatus(status: SpanStatus, message?: string): void;\n  /** End the span. Idempotent. */\n  end(): void;\n}\n\n/**\n * Span constructor parameters.\n *\n * @stable\n */\nexport interface StartSpanOptions<T extends SpanType = SpanType> {\n  readonly type: T;\n  readonly attrs?: SpanAttributes;\n  readonly parent?: AISpan;\n}\n\n/**\n * Pluggable tracer. Implementations live in `@graphorin/observability`.\n * The interface intentionally mirrors a subset of the OTel API so that\n * adapter code is a thin pass-through.\n *\n * @stable\n */\nexport interface Tracer {\n  startSpan<T extends SpanType>(opts: StartSpanOptions<T>): AISpan<T>;\n  /**\n   * Convenience wrapper: start a span, run `fn` inside, and call\n   * `setStatus('ok' | 'error')` + `end()` based on the outcome.\n   */\n  span<T extends SpanType, R>(\n    opts: StartSpanOptions<T>,\n    fn: (span: AISpan<T>) => R | Promise<R>,\n  ): Promise<R>;\n  /** Force-flush any pending spans. */\n  shutdown(): Promise<void>;\n}\n\n/**\n * Minimal no-op tracer. Useful as a typed default when downstream code\n * needs a non-null `Tracer` without taking the observability dependency.\n *\n * @stable\n */\nexport const NOOP_TRACER: Tracer = {\n  startSpan<T extends SpanType>(opts: StartSpanOptions<T>): AISpan<T> {\n    const span: AISpan<T> = {\n      type: opts.type,\n      id: '',\n      traceId: '',\n      setAttributes(): void {},\n      addEvent(): void {},\n      recordException(): void {},\n      setStatus(): void {},\n      end(): void {},\n    };\n    return span;\n  },\n  async span<T extends SpanType, R>(\n    opts: StartSpanOptions<T>,\n    fn: (span: AISpan<T>) => R | Promise<R>,\n  ): Promise<R> {\n    const span = this.startSpan(opts);\n    try {\n      return await fn(span);\n    } finally {\n      span.end();\n    }\n  },\n  async shutdown(): Promise<void> {},\n};\n"],"mappings":";;;;;;;AA8IA,MAAaA,cAAsB;CACjC,UAA8B,MAAsC;AAWlE,SAVwB;GACtB,MAAM,KAAK;GACX,IAAI;GACJ,SAAS;GACT,gBAAsB;GACtB,WAAiB;GACjB,kBAAwB;GACxB,YAAkB;GAClB,MAAY;GACb;;CAGH,MAAM,KACJ,MACA,IACY;EACZ,MAAM,OAAO,KAAK,UAAU,KAAK;AACjC,MAAI;AACF,UAAO,MAAM,GAAG,KAAK;YACb;AACR,QAAK,KAAK;;;CAGd,MAAM,WAA0B;CACjC"}

package/dist/index.d.ts

@@ -1,24 +1,26 @@
 import { AnyValue, Barrier, Channel, ChannelKind, Ephemeral, LatestValue, ListAggregate, Reducer, Stream, anyValue, barrier, ephemeral, latestValue, listAggregate, reducer, stream } from "./channels/channels.js";
 import { Directive, DirectiveOptions } from "./channels/directive.js";
 import { Dispatch, dispatch } from "./channels/dispatch.js";
+import { APPROVAL_PAUSE_KIND, AWAKEABLE_PAUSE_KIND, ApprovalPauseValue, AwakeablePauseValue, TIMER_PAUSE_KIND, TimerPauseValue, awaitExternal, isApprovalPauseValue, isAwakeablePauseValue, isTimerPauseValue, requestApproval, sleepFor, sleepUntil } from "./channels/durable.js";
 import { PAUSE_SIGNAL_BRAND, PauseResumeScope, PauseSignal, isPauseSignal, pause, runWithPauseResume } from "./channels/pause.js";
 import { AuthTokenRecord, AuthTokenStore } from "./contracts/auth-token-store.js";
-import { Checkpoint, CheckpointId, CheckpointMetadata, CheckpointStore, CheckpointTuple, ListOptions, PendingWrite } from "./contracts/checkpoint-store.js";
+import { Checkpoint, CheckpointConflictError, CheckpointId, CheckpointMetadata, CheckpointPutOptions, CheckpointStore, CheckpointTuple, ListOptions, PendingWrite } from "./contracts/checkpoint-store.js";
 import { EmbedOptions, EmbedderProvider } from "./contracts/embedder.js";
 import { EvalSample, EvalScore, EvalScorer } from "./contracts/eval-scorer.js";
 import { LocalProviderTrust, OllamaTrust } from "./contracts/local-provider-trust.js";
 import { LogFields, LogLevel, Logger, NOOP_LOGGER } from "./contracts/logger.js";
 import { SENSITIVITY_ORDER, Sensitivity, acceptsSensitivity } from "./types/sensitivity.js";
-import { Block, EntityRole, Episode, Fact, GraphEntity, Insight, MemoryHit, MemoryKind, MemoryMetadata, MemoryProvenance, MemoryRecord, MemorySearchOptions, MemoryStatus, Rule } from "./types/memory.js";
+import { Block, EntityRole, Episode, Fact, GraphEntity, Insight, MemoryHit, MemoryKind, MemoryMetadata, MemoryOwner, MemoryProvenance, MemoryRecord, MemorySearchOptions, MemoryStatus, Rule } from "./types/memory.js";
 import { ToolCall } from "./types/tool-call.js";
 import { AssistantMessage, AudioContent, FileContent, ImageContent, Message, MessageContent, MessageRole, ReasoningContent, ReasoningContentMeta, SystemMessage, TextContent, ToolMessage, UserMessage } from "./types/message.js";
 import { SessionScope } from "./types/session-scope.js";
 import { EpisodicMemoryStore, MemoryStore, MessageRef, ProceduralMemoryStore, SemanticMemoryStore, SessionListOptions, SessionMemoryStore, SessionMessageWithMetadata, SharedMemoryStore, WorkingMemoryStore } from "./contracts/memory-store.js";
 import { OAuthServerRecord, OAuthServerStore } from "./contracts/oauth-server-store.js";
 import { MODEL_HINTS, ModelHint, ModelSpec, ProviderLike } from "./contracts/preferred-model.js";
+import { AISpan, NOOP_TRACER, SpanAttributeValue, SpanAttributes, SpanStatus, SpanType, StartSpanOptions, Tracer } from "./contracts/tracer.js";
 import { Cost, ModelUsage, Usage, UsageAccumulator, UsageSnapshot, zeroUsage } from "./types/usage.js";
 import { ReasoningContract, ReasoningRetention } from "./contracts/reasoning-retention.js";
-import { ComposeProviderMiddleware, FinishReason, OutputSpec, Provider, ProviderCapabilities, ProviderError, ProviderErrorKind, ProviderEvent, ProviderMiddleware, ProviderRequest, ProviderRequestMetadata, ProviderResponse, ResponseMetadata, ToolChoice, ToolDefinition, ToolDefinitionExample } from "./contracts/provider.js";
+import { ComposeProviderMiddleware, FinishReason, OutputSpec, Provider, ProviderCachePolicy, ProviderCapabilities, ProviderError, ProviderErrorKind, ProviderEvent, ProviderMiddleware, ProviderRequest, ProviderRequestMetadata, ProviderResponse, ResponseMetadata, ToolChoice, ToolDefinition, ToolDefinitionExample } from "./contracts/provider.js";
 import { RedactionInput, RedactionOutput, RedactionValidator } from "./contracts/redaction-validator.js";
 import { Sandbox, SandboxCode, SandboxResult, SandboxRunOptions } from "./contracts/sandbox.js";
 import { SecretRef } from "./contracts/secret-ref.js";
@@ -27,13 +29,12 @@ import { SecretMetadata, SecretResolver, SecretResolverContext, SecretsSetOption
 import { Handoff, HandoffFilter, HandoffInputFilterDescriptor, HandoffRecord, HandoffSecretsInheritance } from "./types/handoff.js";
 import { AgentRegistryEntry, SessionAuditEntry, SessionMetadata, SessionStore, SessionStoreExt, SessionWorkflowRun } from "./contracts/session-store.js";
 import { TokenCounter } from "./contracts/token-counter.js";
-import { AISpan, NOOP_TRACER, SpanAttributeValue, SpanAttributes, SpanStatus, SpanType, StartSpanOptions, Tracer } from "./contracts/tracer.js";
-import { CompletedToolCall, ContentChunk, InboundSanitizationPolicy, MemoryGuardTier, ResultHandle, SandboxPolicy, SideEffectClass, ToolApproval, ToolError, ToolErrorKind, ToolOutcome, ToolResult, ToolSource, ToolTrustClass, TruncationStrategy } from "./types/tool.js";
-import { RunContext, RunError, RunState, RunStateUsageByModel, RunStatus, RunStep, RunTaintSummary, flattenUsageByModel } from "./types/run.js";
+import { CompletedToolCall, ContentChunk, InboundSanitizationPolicy, MemoryGuardTier, RecoveryHint, ResultHandle, SandboxPolicy, SideEffectClass, ToolApproval, ToolError, ToolErrorKind, ToolOutcome, ToolResult, ToolSource, ToolTrustClass, TruncationStrategy } from "./types/tool.js";
+import { RunContext, RunError, RunState, RunStateUsageByModel, RunStatus, RunStep, RunStepProviderResponse, RunTaintSummary, TodoItem, flattenUsageByModel } from "./types/run.js";
 import { ValidationResult, ZodLikeError, ZodLikeSafeParseResult, ZodLikeSchema, validate, validateOrThrow } from "./utils/validation.js";
 import { ResolvedTool, Tool, ToolExample, ToolExecutionContext, ToolReturn, ToolSecretsAccessor } from "./contracts/tool.js";
 import { TriggerState, TriggerStore } from "./contracts/trigger-store.js";
-import { AgentCancellingEvent, AgentEndEvent, AgentErrorEvent, AgentEvaluatorConvergedEvent, AgentEvaluatorIterationEvent, AgentEvent, AgentFanOutMergedEvent, AgentFanOutSpawnedEvent, AgentFollowUpQueuedEvent, AgentLateralLeakDetectedEvent, AgentModelFellbackEvent, AgentProgressReadEvent, AgentProgressWrittenEvent, AgentResult, AgentStartEvent, AgentSteeredEvent, ContextCompactedEvent, FanOutChildMetadata, GuardrailTrippedEvent, HandoffEvent, LateralLeakVector, ProgressArtifactRef, ReasoningDeltaEvent, StepEndEvent, StepStartEvent, TextCompleteEvent, TextDeltaEvent, ToolApprovalDeniedEvent, ToolApprovalGrantedEvent, ToolApprovalRequestedEvent, ToolCallDeltaEvent, ToolCallEndEvent, ToolCallStartEvent, ToolExecuteEndEvent, ToolExecuteErrorEvent, ToolExecutePartialEvent, ToolExecuteProgressEvent, ToolExecuteStartEvent } from "./types/agent-event.js";
+import { AgentCancellingEvent, AgentEndEvent, AgentErrorEvent, AgentEvaluatorConvergedEvent, AgentEvaluatorIterationEvent, AgentEvent, AgentFanOutMergedEvent, AgentFanOutSpawnedEvent, AgentFollowUpQueuedEvent, AgentLateralLeakDetectedEvent, AgentModelFellbackEvent, AgentProgressReadEvent, AgentProgressWrittenEvent, AgentResult, AgentStartEvent, AgentSteeredEvent, ContextCompactedEvent, FanOutChildMetadata, GuardrailTrippedEvent, HandoffEvent, LateralLeakVector, ProgressArtifactRef, ReasoningDeltaEvent, StepEndEvent, StepStartEvent, TextCompleteEvent, TextDeltaEvent, ToolApprovalDeniedEvent, ToolApprovalGrantedEvent, ToolApprovalRequestedEvent, ToolCallDeltaEvent, ToolCallEndEvent, ToolCallStartEvent, ToolExecuteEndEvent, ToolExecuteErrorEvent, ToolExecutePartialEvent, ToolExecuteProgressEvent, ToolExecuteStartEvent, VerifierResultEvent } from "./types/agent-event.js";
 import { StopCondition, and, hasToolCall, isStepCount, isTerminal, not, or } from "./types/stop-condition.js";
 import { WorkflowChannelUpdateEvent, WorkflowCheckpointWrittenEvent, WorkflowCustomEvent, WorkflowEndEvent, WorkflowErrorEvent, WorkflowEvent, WorkflowResumedEvent, WorkflowStartEvent, WorkflowStepEndEvent, WorkflowStepStartEvent, WorkflowSuspendedEvent, WorkflowTaskEndEvent, WorkflowTaskStartEvent } from "./types/workflow-event.js";
 import { assertNever } from "./utils/assert-never.js";
@@ -43,7 +44,7 @@ import { collect, filter, mapStream, merge, take, takeWhile, withSignal } from "
 
 //#region src/index.d.ts
 /**
- * @graphorin/core — types, contracts, and utilities for the Graphorin
+ * @graphorin/core - types, contracts, and utilities for the Graphorin
  * framework. Dependency-free root package every other `@graphorin/*`
  * package depends on.
  *
@@ -53,7 +54,7 @@ import { collect, filter, mapStream, merge, take, takeWhile, withSignal } from "
  * @packageDocumentation
  */
 /** Canonical version constant. Mirrors the `package.json` version. */
-declare const VERSION = "0.5.0";
+declare const VERSION = "0.6.0";
 //#endregion
-export { AISpan, AgentCancellingEvent, AgentEndEvent, AgentErrorEvent, AgentEvaluatorConvergedEvent, AgentEvaluatorIterationEvent, AgentEvent, AgentFanOutMergedEvent, AgentFanOutSpawnedEvent, AgentFollowUpQueuedEvent, AgentLateralLeakDetectedEvent, AgentModelFellbackEvent, AgentProgressReadEvent, AgentProgressWrittenEvent, AgentRegistryEntry, AgentResult, AgentStartEvent, AgentSteeredEvent, AnyValue, AssistantMessage, AsyncContext, AudioContent, AuthTokenRecord, AuthTokenStore, Barrier, Block, Channel, ChannelKind, Checkpoint, CheckpointId, CheckpointMetadata, CheckpointStore, CheckpointTuple, CompletedToolCall, ComposeProviderMiddleware, ContentChunk, ContextCompactedEvent, Cost, Directive, DirectiveOptions, Dispatch, EmbedOptions, EmbedderProvider, EntityRole, Ephemeral, Episode, EpisodicMemoryStore, EvalSample, EvalScore, EvalScorer, Fact, FanOutChildMetadata, FileContent, FinishReason, GraphEntity, GuardrailTrippedEvent, Handoff, HandoffEvent, HandoffFilter, HandoffInputFilterDescriptor, HandoffRecord, HandoffSecretsInheritance, ImageContent, InboundSanitizationPolicy, Insight, LateralLeakVector, LatestValue, ListAggregate, ListOptions, LocalProviderTrust, LogFields, LogLevel, Logger, MODEL_HINTS, MemoryGuardTier, MemoryHit, MemoryKind, MemoryMetadata, MemoryProvenance, MemoryRecord, MemorySearchOptions, MemoryStatus, MemoryStore, Message, MessageContent, MessageRef, MessageRole, ModelHint, ModelSpec, ModelUsage, NODEJS_INSPECT_CUSTOM, NOOP_LOGGER, NOOP_TRACER, OAuthServerRecord, OAuthServerStore, OllamaTrust, OutputSpec, PAUSE_SIGNAL_BRAND, PauseResumeScope, PauseSignal, PendingWrite, ProceduralMemoryStore, ProgressArtifactRef, Provider, ProviderCapabilities, ProviderError, ProviderErrorKind, ProviderEvent, ProviderLike, ProviderMiddleware, ProviderRequest, ProviderRequestMetadata, ProviderResponse, ReasoningContent, ReasoningContentMeta, ReasoningContract, ReasoningDeltaEvent, ReasoningRetention, RedactionInput, RedactionOutput, RedactionValidator, Reducer, ResolvedTool, ResponseMetadata, ResultHandle, Rule, RunContext, RunError, RunState, RunStateUsageByModel, RunStatus, RunStep, RunTaintSummary, SECRET_VALUE_BRAND, SENSITIVITY_ORDER, Sandbox, SandboxCode, SandboxPolicy, SandboxResult, SandboxRunOptions, SecretMetadata, SecretRef, SecretResolver, SecretResolverContext, SecretValue, SecretValueOptions, SecretValueStatic, SecretsSetOptions, SecretsStore, SemanticMemoryStore, Sensitivity, SessionAuditEntry, SessionListOptions, SessionMemoryStore, SessionMessageWithMetadata, SessionMetadata, SessionScope, SessionStore, SessionStoreExt, SessionWorkflowRun, SharedMemoryStore, SideEffectClass, SpanAttributeValue, SpanAttributes, SpanStatus, SpanType, StartSpanOptions, StepEndEvent, StepStartEvent, StopCondition, Stream, SystemMessage, TextCompleteEvent, TextContent, TextDeltaEvent, TokenCounter, Tool, ToolApproval, ToolApprovalDeniedEvent, ToolApprovalGrantedEvent, ToolApprovalRequestedEvent, ToolCall, ToolCallDeltaEvent, ToolCallEndEvent, ToolCallStartEvent, ToolChoice, ToolDefinition, ToolDefinitionExample, ToolError, ToolErrorKind, ToolExample, ToolExecuteEndEvent, ToolExecuteErrorEvent, ToolExecutePartialEvent, ToolExecuteProgressEvent, ToolExecuteStartEvent, ToolExecutionContext, ToolMessage, ToolOutcome, ToolResult, ToolReturn, ToolSecretsAccessor, ToolSource, ToolTrustClass, Tracer, TriggerState, TriggerStore, TruncationStrategy, Usage, UsageAccumulator, UsageSnapshot, UserMessage, VERSION, ValidationResult, WorkflowChannelUpdateEvent, WorkflowCheckpointWrittenEvent, WorkflowCustomEvent, WorkflowEndEvent, WorkflowErrorEvent, WorkflowEvent, WorkflowResumedEvent, WorkflowStartEvent, WorkflowStepEndEvent, WorkflowStepStartEvent, WorkflowSuspendedEvent, WorkflowTaskEndEvent, WorkflowTaskStartEvent, WorkingMemoryStore, ZodLikeError, ZodLikeSafeParseResult, ZodLikeSchema, acceptsSensitivity, and, anyValue, assertNever, barrier, collect, createAsyncContext, dispatch, ephemeral, filter, flattenUsageByModel, hasToolCall, isPauseSignal, isStepCount, isTerminal, latestValue, listAggregate, mapStream, md5, merge, not, or, pause, reducer, runWithPauseResume, stream, take, takeWhile, validate, validateOrThrow, withSignal, xxhash, zeroUsage };
+export { AISpan, APPROVAL_PAUSE_KIND, AWAKEABLE_PAUSE_KIND, AgentCancellingEvent, AgentEndEvent, AgentErrorEvent, AgentEvaluatorConvergedEvent, AgentEvaluatorIterationEvent, AgentEvent, AgentFanOutMergedEvent, AgentFanOutSpawnedEvent, AgentFollowUpQueuedEvent, AgentLateralLeakDetectedEvent, AgentModelFellbackEvent, AgentProgressReadEvent, AgentProgressWrittenEvent, AgentRegistryEntry, AgentResult, AgentStartEvent, AgentSteeredEvent, AnyValue, ApprovalPauseValue, AssistantMessage, AsyncContext, AudioContent, AuthTokenRecord, AuthTokenStore, AwakeablePauseValue, Barrier, Block, Channel, ChannelKind, Checkpoint, CheckpointConflictError, CheckpointId, CheckpointMetadata, CheckpointPutOptions, CheckpointStore, CheckpointTuple, CompletedToolCall, ComposeProviderMiddleware, ContentChunk, ContextCompactedEvent, Cost, Directive, DirectiveOptions, Dispatch, EmbedOptions, EmbedderProvider, EntityRole, Ephemeral, Episode, EpisodicMemoryStore, EvalSample, EvalScore, EvalScorer, Fact, FanOutChildMetadata, FileContent, FinishReason, GraphEntity, GuardrailTrippedEvent, Handoff, HandoffEvent, HandoffFilter, HandoffInputFilterDescriptor, HandoffRecord, HandoffSecretsInheritance, ImageContent, InboundSanitizationPolicy, Insight, LateralLeakVector, LatestValue, ListAggregate, ListOptions, LocalProviderTrust, LogFields, LogLevel, Logger, MODEL_HINTS, MemoryGuardTier, MemoryHit, MemoryKind, MemoryMetadata, MemoryOwner, MemoryProvenance, MemoryRecord, MemorySearchOptions, MemoryStatus, MemoryStore, Message, MessageContent, MessageRef, MessageRole, ModelHint, ModelSpec, ModelUsage, NODEJS_INSPECT_CUSTOM, NOOP_LOGGER, NOOP_TRACER, OAuthServerRecord, OAuthServerStore, OllamaTrust, OutputSpec, PAUSE_SIGNAL_BRAND, PauseResumeScope, PauseSignal, PendingWrite, ProceduralMemoryStore, ProgressArtifactRef, Provider, ProviderCachePolicy, ProviderCapabilities, ProviderError, ProviderErrorKind, ProviderEvent, ProviderLike, ProviderMiddleware, ProviderRequest, ProviderRequestMetadata, ProviderResponse, ReasoningContent, ReasoningContentMeta, ReasoningContract, ReasoningDeltaEvent, ReasoningRetention, RecoveryHint, RedactionInput, RedactionOutput, RedactionValidator, Reducer, ResolvedTool, ResponseMetadata, ResultHandle, Rule, RunContext, RunError, RunState, RunStateUsageByModel, RunStatus, RunStep, RunStepProviderResponse, RunTaintSummary, SECRET_VALUE_BRAND, SENSITIVITY_ORDER, Sandbox, SandboxCode, SandboxPolicy, SandboxResult, SandboxRunOptions, SecretMetadata, SecretRef, SecretResolver, SecretResolverContext, SecretValue, SecretValueOptions, SecretValueStatic, SecretsSetOptions, SecretsStore, SemanticMemoryStore, Sensitivity, SessionAuditEntry, SessionListOptions, SessionMemoryStore, SessionMessageWithMetadata, SessionMetadata, SessionScope, SessionStore, SessionStoreExt, SessionWorkflowRun, SharedMemoryStore, SideEffectClass, SpanAttributeValue, SpanAttributes, SpanStatus, SpanType, StartSpanOptions, StepEndEvent, StepStartEvent, StopCondition, Stream, SystemMessage, TIMER_PAUSE_KIND, TextCompleteEvent, TextContent, TextDeltaEvent, TimerPauseValue, TodoItem, TokenCounter, Tool, ToolApproval, ToolApprovalDeniedEvent, ToolApprovalGrantedEvent, ToolApprovalRequestedEvent, ToolCall, ToolCallDeltaEvent, ToolCallEndEvent, ToolCallStartEvent, ToolChoice, ToolDefinition, ToolDefinitionExample, ToolError, ToolErrorKind, ToolExample, ToolExecuteEndEvent, ToolExecuteErrorEvent, ToolExecutePartialEvent, ToolExecuteProgressEvent, ToolExecuteStartEvent, ToolExecutionContext, ToolMessage, ToolOutcome, ToolResult, ToolReturn, ToolSecretsAccessor, ToolSource, ToolTrustClass, Tracer, TriggerState, TriggerStore, TruncationStrategy, Usage, UsageAccumulator, UsageSnapshot, UserMessage, VERSION, ValidationResult, VerifierResultEvent, WorkflowChannelUpdateEvent, WorkflowCheckpointWrittenEvent, WorkflowCustomEvent, WorkflowEndEvent, WorkflowErrorEvent, WorkflowEvent, WorkflowResumedEvent, WorkflowStartEvent, WorkflowStepEndEvent, WorkflowStepStartEvent, WorkflowSuspendedEvent, WorkflowTaskEndEvent, WorkflowTaskStartEvent, WorkingMemoryStore, ZodLikeError, ZodLikeSafeParseResult, ZodLikeSchema, acceptsSensitivity, and, anyValue, assertNever, awaitExternal, barrier, collect, createAsyncContext, dispatch, ephemeral, filter, flattenUsageByModel, hasToolCall, isApprovalPauseValue, isAwakeablePauseValue, isPauseSignal, isStepCount, isTerminal, isTimerPauseValue, latestValue, listAggregate, mapStream, md5, merge, not, or, pause, reducer, requestApproval, runWithPauseResume, sleepFor, sleepUntil, stream, take, takeWhile, validate, validateOrThrow, withSignal, xxhash, zeroUsage };
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYa,OAAA"}
+{"version":3,"file":"index.d.ts","names":[],"sources":["../src/index.ts"],"sourcesContent":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;cAYa,OAAA"}

package/dist/index.js

@@ -2,7 +2,9 @@ import { anyValue, barrier, ephemeral, latestValue, listAggregate, reducer, stre
 import { Directive } from "./channels/directive.js";
 import { Dispatch, dispatch } from "./channels/dispatch.js";
 import { PAUSE_SIGNAL_BRAND, PauseSignal, isPauseSignal, pause, runWithPauseResume } from "./channels/pause.js";
+import { APPROVAL_PAUSE_KIND, AWAKEABLE_PAUSE_KIND, TIMER_PAUSE_KIND, awaitExternal, isApprovalPauseValue, isAwakeablePauseValue, isTimerPauseValue, requestApproval, sleepFor, sleepUntil } from "./channels/durable.js";
 import "./channels/index.js";
+import { CheckpointConflictError } from "./contracts/checkpoint-store.js";
 import { NOOP_LOGGER } from "./contracts/logger.js";
 import { MODEL_HINTS } from "./contracts/preferred-model.js";
 import { NODEJS_INSPECT_CUSTOM, SECRET_VALUE_BRAND } from "./contracts/secret-value.js";
@@ -21,7 +23,7 @@ import "./utils/index.js";
 
 //#region src/index.ts
 /**
-* @graphorin/core — types, contracts, and utilities for the Graphorin
+* @graphorin/core - types, contracts, and utilities for the Graphorin
 * framework. Dependency-free root package every other `@graphorin/*`
 * package depends on.
 *
@@ -31,8 +33,8 @@ import "./utils/index.js";
 * @packageDocumentation
 */
 /** Canonical version constant. Mirrors the `package.json` version. */
-const VERSION = "0.5.0";
+const VERSION = "0.6.0";
 
 //#endregion
-export { Directive, Dispatch, MODEL_HINTS, NODEJS_INSPECT_CUSTOM, NOOP_LOGGER, NOOP_TRACER, PAUSE_SIGNAL_BRAND, PauseSignal, SECRET_VALUE_BRAND, SENSITIVITY_ORDER, VERSION, acceptsSensitivity, and, anyValue, assertNever, barrier, collect, createAsyncContext, dispatch, ephemeral, filter, flattenUsageByModel, hasToolCall, isPauseSignal, isStepCount, isTerminal, latestValue, listAggregate, mapStream, md5, merge, not, or, pause, reducer, runWithPauseResume, stream, take, takeWhile, validate, validateOrThrow, withSignal, xxhash, zeroUsage };
+export { APPROVAL_PAUSE_KIND, AWAKEABLE_PAUSE_KIND, CheckpointConflictError, Directive, Dispatch, MODEL_HINTS, NODEJS_INSPECT_CUSTOM, NOOP_LOGGER, NOOP_TRACER, PAUSE_SIGNAL_BRAND, PauseSignal, SECRET_VALUE_BRAND, SENSITIVITY_ORDER, TIMER_PAUSE_KIND, VERSION, acceptsSensitivity, and, anyValue, assertNever, awaitExternal, barrier, collect, createAsyncContext, dispatch, ephemeral, filter, flattenUsageByModel, hasToolCall, isApprovalPauseValue, isAwakeablePauseValue, isPauseSignal, isStepCount, isTerminal, isTimerPauseValue, latestValue, listAggregate, mapStream, md5, merge, not, or, pause, reducer, requestApproval, runWithPauseResume, sleepFor, sleepUntil, stream, take, takeWhile, validate, validateOrThrow, withSignal, xxhash, zeroUsage };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["/**\n * @graphorin/core — types, contracts, and utilities for the Graphorin\n * framework. Dependency-free root package every other `@graphorin/*`\n * package depends on.\n *\n * The full documentation lives in the package `README.md` and the\n * sub-module barrels (`./types`, `./contracts`, `./utils`, `./channels`).\n *\n * @packageDocumentation\n */\n\n/** Canonical version constant. Mirrors the `package.json` version. */\nexport const VERSION = '0.5.0';\n\nexport * from './channels/index.js';\nexport * from './contracts/index.js';\nexport * from './types/index.js';\nexport * from './utils/index.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,UAAU"}
+{"version":3,"file":"index.js","names":[],"sources":["../src/index.ts"],"sourcesContent":["/**\n * @graphorin/core - types, contracts, and utilities for the Graphorin\n * framework. Dependency-free root package every other `@graphorin/*`\n * package depends on.\n *\n * The full documentation lives in the package `README.md` and the\n * sub-module barrels (`./types`, `./contracts`, `./utils`, `./channels`).\n *\n * @packageDocumentation\n */\n\n/** Canonical version constant. Mirrors the `package.json` version. */\nexport const VERSION = '0.6.0';\n\nexport * from './channels/index.js';\nexport * from './contracts/index.js';\nexport * from './types/index.js';\nexport * from './utils/index.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAYA,MAAa,UAAU"}

package/dist/types/agent-event.d.ts

@@ -18,7 +18,7 @@ import { RunError, RunState, RunStatus } from "./run.js";
  *
  * @stable
  */
-type AgentEvent<TOutput = string> = AgentStartEvent | StepStartEvent | TextDeltaEvent | TextCompleteEvent | ReasoningDeltaEvent | ToolCallStartEvent | ToolCallDeltaEvent | ToolCallEndEvent | ToolExecuteStartEvent | ToolExecuteProgressEvent | ToolExecutePartialEvent | ToolExecuteEndEvent | ToolExecuteErrorEvent | ToolApprovalRequestedEvent | ToolApprovalGrantedEvent | ToolApprovalDeniedEvent | ContextCompactedEvent | HandoffEvent | AgentSteeredEvent | AgentFollowUpQueuedEvent | AgentCancellingEvent | AgentModelFellbackEvent | AgentFanOutSpawnedEvent | AgentFanOutMergedEvent | AgentEvaluatorIterationEvent | AgentEvaluatorConvergedEvent | AgentProgressWrittenEvent | AgentProgressReadEvent | AgentLateralLeakDetectedEvent | FileGeneratedEvent | SourceCitedEvent | StepEndEvent | GuardrailTrippedEvent | AgentEndEvent<TOutput> | AgentErrorEvent;
+type AgentEvent<TOutput = string> = AgentStartEvent | StepStartEvent | TextDeltaEvent | TextCompleteEvent | ReasoningDeltaEvent | ToolCallStartEvent | ToolCallDeltaEvent | ToolCallEndEvent | ToolExecuteStartEvent | ToolExecuteProgressEvent | ToolExecutePartialEvent | ToolExecuteEndEvent | ToolExecuteErrorEvent | ToolApprovalRequestedEvent | ToolApprovalGrantedEvent | ToolApprovalDeniedEvent | ContextCompactedEvent | HandoffEvent | AgentSteeredEvent | AgentFollowUpQueuedEvent | AgentCancellingEvent | AgentModelFellbackEvent | AgentFanOutSpawnedEvent | AgentFanOutMergedEvent | AgentEvaluatorIterationEvent | AgentEvaluatorConvergedEvent | AgentProgressWrittenEvent | AgentProgressReadEvent | AgentLateralLeakDetectedEvent | FileGeneratedEvent | SourceCitedEvent | StepEndEvent | GuardrailTrippedEvent | VerifierResultEvent | AgentEndEvent<TOutput> | AgentErrorEvent;
 /** @stable */
 interface AgentStartEvent {
   readonly type: 'agent.start';
@@ -159,7 +159,7 @@ interface HandoffEvent {
   readonly reason?: string;
 }
 /**
- * A provider-generated file surfaced from the model stream (AG-26) —
+ * A provider-generated file surfaced from the model stream (AG-26) -
  * previously these `'file'` provider events were silently dropped.
  *
  * @stable
@@ -170,7 +170,7 @@ interface FileGeneratedEvent {
   readonly data: Uint8Array;
 }
 /**
- * A provider citation surfaced from the model stream (AG-26) —
+ * A provider citation surfaced from the model stream (AG-26) -
  * previously these `'source'` provider events were silently dropped.
  *
  * @stable
@@ -193,6 +193,20 @@ interface GuardrailTrippedEvent {
   readonly phase: 'input' | 'output';
   readonly reason?: string;
 }
+/**
+ * Outcome of a terminal-response verifier check (C3). Emitted once per
+ * verifier per verification round; a failed verifier's `feedback` is
+ * also appended to the transcript so the model can address it.
+ *
+ * @stable
+ */
+interface VerifierResultEvent {
+  readonly type: 'verifier.result';
+  readonly verifierId: string;
+  readonly ok: boolean;
+  readonly feedback?: string;
+  readonly stepNumber: number;
+}
 /** @stable */
 interface AgentEndEvent<TOutput = string> {
   readonly type: 'agent.end';
@@ -384,14 +398,14 @@ interface AgentProgressReadEvent {
  * Lateral-leak vector classification surfaced on
  * {@link AgentLateralLeakDetectedEvent.vector}.
  *
- * - `'causality-laundering'` — the assistant message references
+ * - `'causality-laundering'` - the assistant message references
  *   information about a denied earlier action via an indirect chain.
- * - `'commentary-phase'`     — operator-only commentary content was
+ * - `'commentary-phase'`     - operator-only commentary content was
  *   about to escape the session-output boundary.
- * - `'sideways-injection'`   — a low-trust child of an
+ * - `'sideways-injection'`   - a low-trust child of an
  *   `Agent.fanOut(...)` `'judge-merge'` strategy contributed
  *   disproportionately to the merged output.
- * - `'protocol-header'`      — control-character bytes or a
+ * - `'protocol-header'`      - control-character bytes or a
  *   protocol-frame separator was about to escape one of the
  *   internal-service delivery boundaries.
  *
@@ -422,7 +436,7 @@ interface AgentLateralLeakDetectedEvent {
  * `agent.run(...)` and carried by the `agent.end` event.
  *
  * A failed run **resolves** with `status: 'failed'` and the error in
- * `error` — `agent.run(...)` does not reject on run failure (only on
+ * `error` - `agent.run(...)` does not reject on run failure (only on
  * configuration/usage errors thrown before the loop starts). A suspended
  * run resolves with `status: 'awaiting_approval'` and a resumable
  * `state` (AG-9).
@@ -438,12 +452,12 @@ interface AgentResult<TOutput = string> {
   readonly error?: RunError;
   /**
    * The run's final state. Resumable when `status === 'awaiting_approval'`
-   * — pass it back to `agent.run(...)` / `agent.stream(...)` (optionally
+   * - pass it back to `agent.run(...)` / `agent.stream(...)` (optionally
    * round-tripped through `runStateToJSON`/`runStateFromJSON` for
    * durability). Treat as an immutable snapshot.
    */
   readonly state: RunState;
 }
 //#endregion
-export { AgentCancellingEvent, AgentEndEvent, AgentErrorEvent, AgentEvaluatorConvergedEvent, AgentEvaluatorIterationEvent, AgentEvent, AgentFanOutMergedEvent, AgentFanOutSpawnedEvent, AgentFollowUpQueuedEvent, AgentLateralLeakDetectedEvent, AgentModelFellbackEvent, AgentProgressReadEvent, AgentProgressWrittenEvent, AgentResult, AgentStartEvent, AgentSteeredEvent, ContextCompactedEvent, FanOutChildMetadata, GuardrailTrippedEvent, HandoffEvent, LateralLeakVector, ProgressArtifactRef, ReasoningDeltaEvent, StepEndEvent, StepStartEvent, TextCompleteEvent, TextDeltaEvent, ToolApprovalDeniedEvent, ToolApprovalGrantedEvent, ToolApprovalRequestedEvent, ToolCallDeltaEvent, ToolCallEndEvent, ToolCallStartEvent, ToolExecuteEndEvent, ToolExecuteErrorEvent, ToolExecutePartialEvent, ToolExecuteProgressEvent, ToolExecuteStartEvent };
+export { AgentCancellingEvent, AgentEndEvent, AgentErrorEvent, AgentEvaluatorConvergedEvent, AgentEvaluatorIterationEvent, AgentEvent, AgentFanOutMergedEvent, AgentFanOutSpawnedEvent, AgentFollowUpQueuedEvent, AgentLateralLeakDetectedEvent, AgentModelFellbackEvent, AgentProgressReadEvent, AgentProgressWrittenEvent, AgentResult, AgentStartEvent, AgentSteeredEvent, ContextCompactedEvent, FanOutChildMetadata, GuardrailTrippedEvent, HandoffEvent, LateralLeakVector, ProgressArtifactRef, ReasoningDeltaEvent, StepEndEvent, StepStartEvent, TextCompleteEvent, TextDeltaEvent, ToolApprovalDeniedEvent, ToolApprovalGrantedEvent, ToolApprovalRequestedEvent, ToolCallDeltaEvent, ToolCallEndEvent, ToolCallStartEvent, ToolExecuteEndEvent, ToolExecuteErrorEvent, ToolExecutePartialEvent, ToolExecuteProgressEvent, ToolExecuteStartEvent, VerifierResultEvent };
 //# sourceMappingURL=agent-event.d.ts.map

package/dist/types/agent-event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-event.d.ts","names":[],"sources":["../../src/types/agent-event.ts"],"sourcesContent":[],"mappings":";;;;;;;;AAkBA;;;;;;;;;;;;AAYI,KAZQ,UAYR,CAAA,UAAA,MAAA,CAAA,GAXA,eAWA,GAVA,cAUA,GATA,cASA,GARA,iBAQA,GAPA,mBAOA,GANA,kBAMA,GALA,kBAKA,GAJA,gBAIA,GAHA,qBAGA,GAFA,wBAEA,GADA,uBACA,GAAA,mBAAA,GACA,qBADA,GAEA,0BAFA,GAGA,wBAHA,GAIA,uBAJA,GAKA,qBALA,GAMA,YANA,GAOA,iBAPA,GAQA,wBARA,GASA,oBATA,GAUA,uBAVA,GAWA,uBAXA,GAYA,sBAZA,GAaA,4BAbA,GAcA,4BAdA,GAeA,yBAfA,GAgBA,sBAhBA,GAiBA,6BAjBA,GAkBA,kBAlBA,GAmBA,gBAnBA,GAoBA,YApBA,GAqBA,qBArBA,GAsBA,aAtBA,CAsBc,OAtBd,CAAA,GAuBA,eAvBA;;AAEA,UAwBa,eAAA,CAxBb;EACA,SAAA,IAAA,EAAA,aAAA;EACA,SAAA,KAAA,EAAA,MAAA;EACA,SAAA,OAAA,EAAA,MAAA;;;AAGA,UAyBa,cAAA,CAzBb;EACA,SAAA,IAAA,EAAA,YAAA;EACA,SAAA,UAAA,EAAA,MAAA;;;AAGA,UA0Ba,cAAA,CA1Bb;EACA,SAAA,IAAA,EAAA,YAAA;EACA,SAAA,KAAA,EAAA,MAAA;;;AAGA,UA2Ba,iBAAA,CA3Bb;EACA,SAAA,IAAA,EAAA,eAAA;EACA,SAAA,IAAA,EAAA,MAAA;;;AAEA,UA6Ba,mBAAA,CA7Bb;EACA,SAAA,IAAA,EAAA,iBAAA;EAAe,SAAA,KAAA,EAAA,MAAA;AAGnB;AAOA;AAMiB,UAkBA,kBAAA,CAlBc;EAMd,SAAA,IAAA,EAAA,iBAAiB;EAMjB,SAAA,UAAA,EAAA,MAAmB;EAMnB,SAAA,QAAA,EAAA,MAAkB;EAQlB,SAAA,IAAA,EAAA,OAAkB;AAOnC;AAOA;AAYiB,UA1BA,kBAAA,CA0BwB;EAmBxB,SAAA,IAAA,EAAA,iBAAuB;EAWvB,SAAA,UAAA,EAAA,MAAmB;EAQnB,SAAA,SAAA,EAAA,MAAqB;AAOtC;AAOA;AAMiB,UA7EA,gBAAA,CA6EuB;EAYvB,SAAA,IAAA,EAAA,eAAqB;EAcrB,SAAA,UAAY,EAAA,MAAA;EAaZ,SAAA,SAAA,EAAA,OAAkB;AAYnC;AAOA;AAOiB,UAvIA,qBAAA,CAuIqB;EAQrB,SAAA,IAAA,EAAA,oBAGc;EAId,SAAA,UAAe,EAAA,MAAA;AAWhC;AAWA;AAYA;AAmBA;AAiBA;AAiBA;AAaA;AAkBA;AAiBiB,UAjRA,wBAAA,CAiR4B;EAgB5B,SAAA,IAAA,EAAA,uBAMC;EAUD,SAAA,QAAA,EAAA,MAAA;EAaA,SAAA,UAAA,EAAA,MAAsB;EA2B3B,SAAA,OAAA,EAAA,MAAiB;EAYZ,SAAA,KAAA,CAAA,EAAA,MAAA;EA0BA,SAAA,OAAW,CAAA,EAAA,MAAA;EACT,SAAA,UAAA,EAAA,MAAA;EACD,SAAA,EAAA,EAAA,MAAA;;;;;;;;;;UA9WD,uBAAA;;;;kBAIC;;;;;;UAOD,mBAAA;;;;;;;UAQA,qBAAA;;;kBAGC;;;UAID,0BAAA;;;;;;UAOA,wBAAA;;;;;UAMA,uBAAA;;;;;;;;;;;UAYA,qBAAA;;;;;;;;;;;;;UAcA,YAAA;;;;;;;;;;;;UAaA,kBAAA;;;iBAGA;;;;;;;;UASA,gBAAA;;;;;;UAOA,YAAA;;;kBAGC;;;UAID,qBAAA;;;;;;;UAQA;;;mBAGE,YAAY;;;UAId,eAAA;;;;;;;;;;;;;UAWA,iBAAA;;;;;;;;;;UAWA,wBAAA;;;;;;;;;;;UAYA,oBAAA;;;;;;;;;;;;;;;;;;UAmBA,uBAAA;;;;;;;;;;;;;;;;UAiBA,uBAAA;;;;;;;;;;;;;;;;UAiBA,mBAAA;;;;;;;;;;;;UAaA,sBAAA;;;;;;;;;;0BAUS,cAAc;;;;;;;UAQvB,4BAAA;;;;;;;;;;;;;;;;UAiBA,4BAAA;;;;;;;;;;;;;;;UAgBA,mBAAA;;;;;;kBAMC;;;;;;;;;UAUD,yBAAA;;;;;gBAKD;;;;;;;UAQC,sBAAA;;;;;iBAKA,cAAc;;;;;;;;;;;;;;;;;;;;;KAsBnB,iBAAA;;;;;;;UAYK,6BAAA;;;;;mBAKE;;2BAEQ;;;;;;;;;;;;;;;;;;UAmBV;mBACE;kBACD;;mBAEC;;mBAEA;;;;;;;kBAOD"}
+{"version":3,"file":"agent-event.d.ts","names":[],"sources":["../../src/types/agent-event.ts"],"sourcesContent":[],"mappings":";;;;;;;;AAkBA;;;;;;;;;;;;AAYI,KAZQ,UAYR,CAAA,UAAA,MAAA,CAAA,GAXA,eAWA,GAVA,cAUA,GATA,cASA,GARA,iBAQA,GAPA,mBAOA,GANA,kBAMA,GALA,kBAKA,GAJA,gBAIA,GAHA,qBAGA,GAFA,wBAEA,GADA,uBACA,GAAA,mBAAA,GACA,qBADA,GAEA,0BAFA,GAGA,wBAHA,GAIA,uBAJA,GAKA,qBALA,GAMA,YANA,GAOA,iBAPA,GAQA,wBARA,GASA,oBATA,GAUA,uBAVA,GAWA,uBAXA,GAYA,sBAZA,GAaA,4BAbA,GAcA,4BAdA,GAeA,yBAfA,GAgBA,sBAhBA,GAiBA,6BAjBA,GAkBA,kBAlBA,GAmBA,gBAnBA,GAoBA,YApBA,GAqBA,qBArBA,GAsBA,mBAtBA,GAuBA,aAvBA,CAuBc,OAvBd,CAAA,GAwBA,eAxBA;;AAEA,UAyBa,eAAA,CAzBb;EACA,SAAA,IAAA,EAAA,aAAA;EACA,SAAA,KAAA,EAAA,MAAA;EACA,SAAA,OAAA,EAAA,MAAA;;;AAGA,UA0Ba,cAAA,CA1Bb;EACA,SAAA,IAAA,EAAA,YAAA;EACA,SAAA,UAAA,EAAA,MAAA;;;AAGA,UA2Ba,cAAA,CA3Bb;EACA,SAAA,IAAA,EAAA,YAAA;EACA,SAAA,KAAA,EAAA,MAAA;;;AAGA,UA4Ba,iBAAA,CA5Bb;EACA,SAAA,IAAA,EAAA,eAAA;EACA,SAAA,IAAA,EAAA,MAAA;;;AAGc,UA6BD,mBAAA,CA7BC;EAAd,SAAA,IAAA,EAAA,iBAAA;EACA,SAAA,KAAA,EAAA,MAAA;;AAGJ;AAOiB,UAwBA,kBAAA,CAxBc;EAMd,SAAA,IAAA,EAAA,iBAAc;EAMd,SAAA,UAAA,EAAiB,MAAA;EAMjB,SAAA,QAAA,EAAA,MAAmB;EAMnB,SAAA,IAAA,EAAA,OAAkB;AAQnC;AAOA;AAOiB,UAdA,kBAAA,CAcqB;EAYrB,SAAA,IAAA,EAAA,iBAAwB;EAmBxB,SAAA,UAAA,EAAA,MAAuB;EAWvB,SAAA,SAAA,EAAA,MAAmB;AAQpC;AAOA;AAOiB,UAvEA,gBAAA,CAuEwB;EAMxB,SAAA,IAAA,EAAA,eAAuB;EAYvB,SAAA,UAAA,EAAA,MAAqB;EAcrB,SAAA,SAAY,EAAA,OAAA;AAa7B;AAYA;AAOiB,UAhIA,qBAAA,CAmIM;EAIN,SAAA,IAAA,EAAA,oBAAqB;EAcrB,SAAA,UAAA,EAAA,MAAmB;AASpC;AAOA;AAWA;AAWA;AAYA;AAmBA;AAiBA;AAiBA;AAaiB,UA7PA,wBAAA,CAuQuB;EAQvB,SAAA,IAAA,EAAA,uBAA4B;EAiB5B,SAAA,QAAA,EAAA,MAAA;EAgBA,SAAA,UAAA,EAAA,MAAmB;EAgBnB,SAAA,OAAA,EAAA,MAAA;EAaA,SAAA,KAAA,CAAA,EAAA,MAAA;EA2BL,SAAA,OAAA,CAAA,EAAA,MAAiB;EAYZ,SAAA,UAAA,EAAA,MAAA;EA0BA,SAAA,EAAA,EAAA,MAAW;;;;;;;;;;UA3XX,uBAAA;;;;kBAIC;;;;;;UAOD,mBAAA;;;;;;;UAQA,qBAAA;;;kBAGC;;;UAID,0BAAA;;;;;;UAOA,wBAAA;;;;;UAMA,uBAAA;;;;;;;;;;;UAYA,qBAAA;;;;;;;;;;;;;UAcA,YAAA;;;;;;;;;;;;UAaA,kBAAA;;;iBAGA;;;;;;;;UASA,gBAAA;;;;;;UAOA,YAAA;;;kBAGC;;;UAID,qBAAA;;;;;;;;;;;;;UAcA,mBAAA;;;;;;;;UASA;;;mBAGE,YAAY;;;UAId,eAAA;;;;;;;;;;;;;UAWA,iBAAA;;;;;;;;;;UAWA,wBAAA;;;;;;;;;;;UAYA,oBAAA;;;;;;;;;;;;;;;;;;UAmBA,uBAAA;;;;;;;;;;;;;;;;UAiBA,uBAAA;;;;;;;;;;;;;;;;UAiBA,mBAAA;;;;;;;;;;;;UAaA,sBAAA;;;;;;;;;;0BAUS,cAAc;;;;;;;UAQvB,4BAAA;;;;;;;;;;;;;;;;UAiBA,4BAAA;;;;;;;;;;;;;;;UAgBA,mBAAA;;;;;;kBAMC;;;;;;;;;UAUD,yBAAA;;;;;gBAKD;;;;;;;UAQC,sBAAA;;;;;iBAKA,cAAc;;;;;;;;;;;;;;;;;;;;;KAsBnB,iBAAA;;;;;;;UAYK,6BAAA;;;;;mBAKE;;2BAEQ;;;;;;;;;;;;;;;;;;UAmBV;mBACE;kBACD;;mBAEC;;mBAEA;;;;;;;kBAOD"}

package/dist/types/handoff.d.ts

@@ -10,7 +10,7 @@ import { Message } from "./message.js";
  * `HandoffFilter` without an agent dependency.
  *
  * The default for the agent runtime is `lastN(10)` (per the security-first
- * compose policy). Filters should be **pure** — they receive a frozen
+ * compose policy). Filters should be **pure** - they receive a frozen
  * history and return a fresh array.
  *
  * @stable
@@ -18,7 +18,7 @@ import { Message } from "./message.js";
 type HandoffFilter = (history: readonly Message[]) => readonly Message[];
 /**
  * Declarative handoff target. The value carries a reference to the target
- * agent (`agentId` — looked up at runtime via the `AgentRegistry`) plus
+ * agent (`agentId` - looked up at runtime via the `AgentRegistry`) plus
  * optional metadata used by the runtime when constructing the
  * `transfer_to_<agentName>` virtual tool.
  *
@@ -40,7 +40,7 @@ interface Handoff {
  * the JSONL session export so a replay can re-construct the filter
  * stack even after the runtime filter implementations evolve.
  *
- * The discriminator `kind` is an open string union — well-known kinds
+ * The discriminator `kind` is an open string union - well-known kinds
  * include `'full' | 'last-n' | 'last-user' | 'summary' |
  * 'sensitivity-filter' | 'compose' | 'custom'`. The accompanying `meta`
  * carries kind-specific data (for example `{ n: 10 }` for `'last-n'`,
@@ -57,14 +57,14 @@ interface HandoffInputFilterDescriptor {
 }
 /**
  * How the parent's secrets surface is propagated to the sub-agent
- * during a handoff. The default — `'inherit-allowlist'` with an empty
- * inherited list — applies the principle of least authority: the sub-
+ * during a handoff. The default - `'inherit-allowlist'` with an empty
+ * inherited list - applies the principle of least authority: the sub-
  * agent inherits only the keys the operator has explicitly named.
  *
- * - `'inherit-allowlist'` — inherit the keys named in
+ * - `'inherit-allowlist'` - inherit the keys named in
  *   `inheritedSecrets`. Empty list = no inheritance.
- * - `'isolated'` — the sub-agent runs with an empty secrets surface.
- * - `'forward-explicit'` — every secret access on the sub-agent's side
+ * - `'isolated'` - the sub-agent runs with an empty secrets surface.
+ * - `'forward-explicit'` - every secret access on the sub-agent's side
  *   must be explicitly broadened by the operator with a recorded
  *   `secretsOverrideReason`.
  *
@@ -98,7 +98,7 @@ interface HandoffRecord {
   /**
    * Keys inherited by the sub-agent under the
    * `'inherit-allowlist'` / `'forward-explicit'` policies. Never the
-   * secret values themselves — only the public key names.
+   * secret values themselves - only the public key names.
    */
   readonly inheritedSecrets?: ReadonlyArray<string>;
   /**

package/dist/types/index.d.ts

@@ -1,13 +1,13 @@
 import { SENSITIVITY_ORDER, Sensitivity, acceptsSensitivity } from "./sensitivity.js";
-import { Block, EntityRole, Episode, Fact, GraphEntity, Insight, MemoryHit, MemoryKind, MemoryMetadata, MemoryProvenance, MemoryRecord, MemorySearchOptions, MemoryStatus, Rule } from "./memory.js";
+import { Block, EntityRole, Episode, Fact, GraphEntity, Insight, MemoryHit, MemoryKind, MemoryMetadata, MemoryOwner, MemoryProvenance, MemoryRecord, MemorySearchOptions, MemoryStatus, Rule } from "./memory.js";
 import { ToolCall } from "./tool-call.js";
 import { AssistantMessage, AudioContent, FileContent, ImageContent, Message, MessageContent, MessageRole, ReasoningContent, ReasoningContentMeta, SystemMessage, TextContent, ToolMessage, UserMessage } from "./message.js";
 import { SessionScope } from "./session-scope.js";
 import { Cost, ModelUsage, Usage, UsageAccumulator, UsageSnapshot, zeroUsage } from "./usage.js";
 import { Handoff, HandoffFilter, HandoffInputFilterDescriptor, HandoffRecord, HandoffSecretsInheritance } from "./handoff.js";
-import { CompletedToolCall, ContentChunk, InboundSanitizationPolicy, MemoryGuardTier, ResultHandle, SandboxPolicy, SideEffectClass, ToolApproval, ToolError, ToolErrorKind, ToolOutcome, ToolResult, ToolSource, ToolTrustClass, TruncationStrategy } from "./tool.js";
-import { RunContext, RunError, RunState, RunStateUsageByModel, RunStatus, RunStep, RunTaintSummary, flattenUsageByModel } from "./run.js";
-import { AgentCancellingEvent, AgentEndEvent, AgentErrorEvent, AgentEvaluatorConvergedEvent, AgentEvaluatorIterationEvent, AgentEvent, AgentFanOutMergedEvent, AgentFanOutSpawnedEvent, AgentFollowUpQueuedEvent, AgentLateralLeakDetectedEvent, AgentModelFellbackEvent, AgentProgressReadEvent, AgentProgressWrittenEvent, AgentResult, AgentStartEvent, AgentSteeredEvent, ContextCompactedEvent, FanOutChildMetadata, GuardrailTrippedEvent, HandoffEvent, LateralLeakVector, ProgressArtifactRef, ReasoningDeltaEvent, StepEndEvent, StepStartEvent, TextCompleteEvent, TextDeltaEvent, ToolApprovalDeniedEvent, ToolApprovalGrantedEvent, ToolApprovalRequestedEvent, ToolCallDeltaEvent, ToolCallEndEvent, ToolCallStartEvent, ToolExecuteEndEvent, ToolExecuteErrorEvent, ToolExecutePartialEvent, ToolExecuteProgressEvent, ToolExecuteStartEvent } from "./agent-event.js";
+import { CompletedToolCall, ContentChunk, InboundSanitizationPolicy, MemoryGuardTier, RecoveryHint, ResultHandle, SandboxPolicy, SideEffectClass, ToolApproval, ToolError, ToolErrorKind, ToolOutcome, ToolResult, ToolSource, ToolTrustClass, TruncationStrategy } from "./tool.js";
+import { RunContext, RunError, RunState, RunStateUsageByModel, RunStatus, RunStep, RunStepProviderResponse, RunTaintSummary, TodoItem, flattenUsageByModel } from "./run.js";
+import { AgentCancellingEvent, AgentEndEvent, AgentErrorEvent, AgentEvaluatorConvergedEvent, AgentEvaluatorIterationEvent, AgentEvent, AgentFanOutMergedEvent, AgentFanOutSpawnedEvent, AgentFollowUpQueuedEvent, AgentLateralLeakDetectedEvent, AgentModelFellbackEvent, AgentProgressReadEvent, AgentProgressWrittenEvent, AgentResult, AgentStartEvent, AgentSteeredEvent, ContextCompactedEvent, FanOutChildMetadata, GuardrailTrippedEvent, HandoffEvent, LateralLeakVector, ProgressArtifactRef, ReasoningDeltaEvent, StepEndEvent, StepStartEvent, TextCompleteEvent, TextDeltaEvent, ToolApprovalDeniedEvent, ToolApprovalGrantedEvent, ToolApprovalRequestedEvent, ToolCallDeltaEvent, ToolCallEndEvent, ToolCallStartEvent, ToolExecuteEndEvent, ToolExecuteErrorEvent, ToolExecutePartialEvent, ToolExecuteProgressEvent, ToolExecuteStartEvent, VerifierResultEvent } from "./agent-event.js";
 import { StopCondition, and, hasToolCall, isStepCount, isTerminal, not, or } from "./stop-condition.js";
 import { WorkflowChannelUpdateEvent, WorkflowCheckpointWrittenEvent, WorkflowCustomEvent, WorkflowEndEvent, WorkflowErrorEvent, WorkflowEvent, WorkflowResumedEvent, WorkflowStartEvent, WorkflowStepEndEvent, WorkflowStepStartEvent, WorkflowSuspendedEvent, WorkflowTaskEndEvent, WorkflowTaskStartEvent } from "./workflow-event.js";
-export { type AgentCancellingEvent, type AgentEndEvent, type AgentErrorEvent, type AgentEvaluatorConvergedEvent, type AgentEvaluatorIterationEvent, type AgentEvent, type AgentFanOutMergedEvent, type AgentFanOutSpawnedEvent, type AgentFollowUpQueuedEvent, type AgentLateralLeakDetectedEvent, type AgentModelFellbackEvent, type AgentProgressReadEvent, type AgentProgressWrittenEvent, type AgentResult, type AgentStartEvent, type AgentSteeredEvent, type AssistantMessage, type AudioContent, type Block, type CompletedToolCall, type ContentChunk, type ContextCompactedEvent, type Cost, type EntityRole, type Episode, type Fact, type FanOutChildMetadata, type FileContent, type GraphEntity, type GuardrailTrippedEvent, type Handoff, type HandoffEvent, type HandoffFilter, type HandoffInputFilterDescriptor, type HandoffRecord, type HandoffSecretsInheritance, type ImageContent, type InboundSanitizationPolicy, type Insight, type LateralLeakVector, type MemoryGuardTier, type MemoryHit, type MemoryKind, type MemoryMetadata, type MemoryProvenance, type MemoryRecord, type MemorySearchOptions, type MemoryStatus, type Message, type MessageContent, type MessageRole, type ModelUsage, type ProgressArtifactRef, type ReasoningContent, type ReasoningContentMeta, type ReasoningDeltaEvent, type ResultHandle, type Rule, type RunContext, type RunError, type RunState, type RunStateUsageByModel, type RunStatus, type RunStep, type RunTaintSummary, SENSITIVITY_ORDER, type SandboxPolicy, type Sensitivity, type SessionScope, type SideEffectClass, type StepEndEvent, type StepStartEvent, type StopCondition, type SystemMessage, type TextCompleteEvent, type TextContent, type TextDeltaEvent, type ToolApproval, type ToolApprovalDeniedEvent, type ToolApprovalGrantedEvent, type ToolApprovalRequestedEvent, type ToolCall, type ToolCallDeltaEvent, type ToolCallEndEvent, type ToolCallStartEvent, type ToolError, type ToolErrorKind, type ToolExecuteEndEvent, type ToolExecuteErrorEvent, type ToolExecutePartialEvent, type ToolExecuteProgressEvent, type ToolExecuteStartEvent, type ToolMessage, type ToolOutcome, type ToolResult, type ToolSource, type ToolTrustClass, type TruncationStrategy, type Usage, type UsageAccumulator, type UsageSnapshot, type UserMessage, type WorkflowChannelUpdateEvent, type WorkflowCheckpointWrittenEvent, type WorkflowCustomEvent, type WorkflowEndEvent, type WorkflowErrorEvent, type WorkflowEvent, type WorkflowResumedEvent, type WorkflowStartEvent, type WorkflowStepEndEvent, type WorkflowStepStartEvent, type WorkflowSuspendedEvent, type WorkflowTaskEndEvent, type WorkflowTaskStartEvent, acceptsSensitivity, and, flattenUsageByModel, hasToolCall, isStepCount, isTerminal, not, or, zeroUsage };
+export { type AgentCancellingEvent, type AgentEndEvent, type AgentErrorEvent, type AgentEvaluatorConvergedEvent, type AgentEvaluatorIterationEvent, type AgentEvent, type AgentFanOutMergedEvent, type AgentFanOutSpawnedEvent, type AgentFollowUpQueuedEvent, type AgentLateralLeakDetectedEvent, type AgentModelFellbackEvent, type AgentProgressReadEvent, type AgentProgressWrittenEvent, type AgentResult, type AgentStartEvent, type AgentSteeredEvent, type AssistantMessage, type AudioContent, type Block, type CompletedToolCall, type ContentChunk, type ContextCompactedEvent, type Cost, type EntityRole, type Episode, type Fact, type FanOutChildMetadata, type FileContent, type GraphEntity, type GuardrailTrippedEvent, type Handoff, type HandoffEvent, type HandoffFilter, type HandoffInputFilterDescriptor, type HandoffRecord, type HandoffSecretsInheritance, type ImageContent, type InboundSanitizationPolicy, type Insight, type LateralLeakVector, type MemoryGuardTier, type MemoryHit, type MemoryKind, type MemoryMetadata, type MemoryOwner, type MemoryProvenance, type MemoryRecord, type MemorySearchOptions, type MemoryStatus, type Message, type MessageContent, type MessageRole, type ModelUsage, type ProgressArtifactRef, type ReasoningContent, type ReasoningContentMeta, type ReasoningDeltaEvent, type RecoveryHint, type ResultHandle, type Rule, type RunContext, type RunError, type RunState, type RunStateUsageByModel, type RunStatus, type RunStep, type RunStepProviderResponse, type RunTaintSummary, SENSITIVITY_ORDER, type SandboxPolicy, type Sensitivity, type SessionScope, type SideEffectClass, type StepEndEvent, type StepStartEvent, type StopCondition, type SystemMessage, type TextCompleteEvent, type TextContent, type TextDeltaEvent, type TodoItem, type ToolApproval, type ToolApprovalDeniedEvent, type ToolApprovalGrantedEvent, type ToolApprovalRequestedEvent, type ToolCall, type ToolCallDeltaEvent, type ToolCallEndEvent, type ToolCallStartEvent, type ToolError, type ToolErrorKind, type ToolExecuteEndEvent, type ToolExecuteErrorEvent, type ToolExecutePartialEvent, type ToolExecuteProgressEvent, type ToolExecuteStartEvent, type ToolMessage, type ToolOutcome, type ToolResult, type ToolSource, type ToolTrustClass, type TruncationStrategy, type Usage, type UsageAccumulator, type UsageSnapshot, type UserMessage, type VerifierResultEvent, type WorkflowChannelUpdateEvent, type WorkflowCheckpointWrittenEvent, type WorkflowCustomEvent, type WorkflowEndEvent, type WorkflowErrorEvent, type WorkflowEvent, type WorkflowResumedEvent, type WorkflowStartEvent, type WorkflowStepEndEvent, type WorkflowStepStartEvent, type WorkflowSuspendedEvent, type WorkflowTaskEndEvent, type WorkflowTaskStartEvent, acceptsSensitivity, and, flattenUsageByModel, hasToolCall, isStepCount, isTerminal, not, or, zeroUsage };